inglesdeliveryxpress[.]com

The domain inglesdeliveryxpress.com was registered on September 06, 2025 through Dynadot LLC and resolves to the IPv4 address 198.12.80.250, which belongs to AS36352 HostPapa and is geolocated in the United States. The authoritative name servers are ns3.safedatahost.cloud and ns4.safedatahost.cloud, and the site does not present an SSL certificate, serving content over plain HTTP. The page title observed at the time of collection was "Inglés Delivery Express – Inglés Delivery Express," which does not directly reference the impersonated brand but the domain metadata flags the site as an Instagram brand impersonation. VirusTotal analysis shows that 12 of 95 scanned security vendors flagged the domain as malicious, indicating a moderate level of consensus among detection engines.

Gridinsoft assigned a trust score of zero out of one hundred, reinforcing the suspicion of malicious intent. The domain is listed on a single security blocklist and has been taken down by the PhishDestroy takedown service, confirming that the hosting provider responded to abuse reports. The elevated risk rating reflects the combination of brand targeting, lack of encryption, and multiple vendor detections.

Current visibility is limited because the site is offline, and no additional content analysis is available. Defenders should continue to block the domain at perimeter and DNS layers, monitor for related C2 infrastructure tied to the 198.12.80.250 IP range, and update detection signatures to include the observed page title and nameserver pattern. Further investigation is needed to determine whether the domain was part of a broader phishing campaign targeting Instagram credentials, as the exact payload and user interaction flow remain unknown.